Generate a Client Certificate (Java)

The following procedure provides an example of generating a client certificate using keytool.

Deploy a client certificate for a Java client

Start

1. Generate a Java client key:

   keytool -genkey -alias javawscpclient -keyalg RSA -keystore
   keystore.jks -keysize 2048

   This command generates a client key and places it in the local keystore.

2. Export the generated certificate from the keystore:

   keytool -export -alias javawscpclient -keystore keystore.jks -file
   javawscpclient.cer

3. Convert the exported certificate to .PEM format:

   openssl x509 -inform der -in javawscpclient.cer -out
   javawscpclient.pem

4. Copy the Java client certificate: Append the contents of javawscplient.pem to the contents of wscp_clients.pem on the server host.

End